Cookie Policy - Index 10

1. What Is a Cookie?

Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit a website. They help recognise your browser, remember your preferences and collect certain technical data.

This policy also covers similar technologies (local storage — localStorage —, tracking pixels, web beacons) that serve comparable purposes. In this document, the term “cookie” refers to all of these technologies.

Cookies are managed by your browser. You can configure or delete them at any time through your browser settings.

2. Why We Use Cookies

Index 10 uses cookies to:

Ensure the core functionality of the platform (essential cookies)
Remember your language, theme and interface settings
Measure usage and performance to improve the product
Personalise your experience and surface relevant content
Measure marketing campaign performance with your consent

3. Types of Cookies

Essential cookies (mandatory)

Required for the site to operate. These cookies cannot be disabled.

Authentication: Keeps you logged in securely (Supabase sb-* cookies)
Security: Session protection (SameSite cookies, secure authentication)
Core features: Stores navigation choices and project context
Consent: Records your cookie preferences (localStorage index10_cookie_consent)

Retention: Session or up to 12 months. Consent record: 13 months (CNIL recommendation).

Analytics cookies (optional)

Help us understand how the platform is used so we can improve reliability and usability.

Usage analytics: Visited pages, feature adoption, session duration
Performance: Error tracking, loading times, API latency
Product insights: User journeys and funnel metrics

Providers that may be activated: Google Analytics (anonymised), Hotjar (behavioural analytics)
Retention: Up to 13 months (CNIL recommendation n°2020-091)

Marketing cookies (optional)

Used to deliver relevant advertising and measure conversions when you opt in.

Conversion tracking: Measures campaign effectiveness
Remarketing: Shows tailored ads across partner networks
Social media: Enables sharing widgets and community engagement

Provider that may be activated: Meta Pixel
Retention: Up to 12 months

Functional cookies (optional)

Enhance comfort by remembering workspace layout, theme and support interactions.

Interface: Dark/light mode, editor layout, sidebar state (sidebar_state cookie, 7 days)
Preferences: Display settings, editor layout (localStorage)
Workspace: Active workspace selection (localStorage)

Retention: Up to 12 months

4. Managing Your Preferences

🍪 Cookie Preferences Centre

You can adjust your cookie preferences at any time using the dedicated control panel.

Browser settings

You can also configure cookies directly in your browser:

Chrome: Settings → Privacy and security → Cookies
Firefox: Options → Privacy & Security → Cookies
Safari: Preferences → Privacy → Cookies
Edge: Settings → Cookies and site permissions

Automatic opt-out signals

We honour Global Privacy Control (GPC) and Do Not Track (DNT) signals sent by your browser. When such a signal is detected, non-essential cookies are not set and no further action is required on your part.

Heads-up: Disabling some cookies may impact performance or limit access to certain features.

5. Third-Party Cookies

The following third-party services may set cookies on your device:

Provider	Purpose	Status	Policy
Supabase	Authentication (`sb-*` cookies)	Active	Supabase privacy policy
Stripe	Secure payment processing	Active	Stripe privacy policy
Google Analytics	Audience measurement (anonymised)	Conditional	Google privacy policy
Meta Pixel	Marketing conversion tracking	Conditional	Meta privacy policy
Hotjar	Behavioural analytics and heatmaps	Conditional	Hotjar privacy policy

Conditional: these services are only activated if MEGAMOUNT has enabled them on the platform and you have given your consent.

6. Your Rights

Under GDPR and applicable laws you have the right to:

Be informed: Understand why and how cookies are used
Consent: Accept or refuse non-essential cookies
Withdraw consent: Update your choices at any time
Object: Opt out from processing for marketing purposes
Access: Request details about data collected through cookies

7. Legal Basis

Essential cookies: Consent exemption (Art. 5(3) ePrivacy Directive 2002/58/EC, transposed by Art. 82 French Data Protection Act) — these cookies are strictly necessary to provide the service
Analytics cookies: Consent (GDPR Art. 6.1.a)
Marketing cookies: Consent (GDPR Art. 6.1.a)
Functional cookies: Legitimate interest or consent depending on the feature

8. Retention Periods

Session cookies: Deleted when you close the browser
Persistent cookies: Up to 12 months unless the law requires longer
Cookie consent records: 13 months (CNIL recommendation)
Analytics data: Up to 13 months (CNIL recommendation n°2020-091)

9. Contact

If you have any questions about our use of cookies:

Email: privacy@index10.com
Subject: “Cookie enquiry”
Address: MEGAMOUNT, 30 BOULEVARD DE SEBASTOPOL, 75004 PARIS, France

You can also review our Privacy Policy for more details about personal data processing.

Useful resources:

www.allaboutcookies.org — general information about cookies
www.youronlinechoices.eu — manage advertising cookies (Europe)
CNIL — Cookies and trackers

10. Updates

We may update this Cookie Policy to reflect changes to our site, our providers or applicable regulations. Material changes (adding new trackers, changing purposes) will be notified through a new consent banner and/or by email at least 15 days before they take effect. Where required, we will request your consent again.

11. Regulatory References

Directive 2002/58/EC (ePrivacy Directive) — Article 5(3)
CNIL — Guidelines n°2020-091 on cookies and other trackers
CNIL — Recommendation n°2020-092 on practical consent collection
French Data Protection Act (Loi n°78-17, 6 January 1978) — Article 82